T0839_module-firmware
Adversaries may install malicious or vulnerable firmware onto modular hardware devices.
1.21k repo starsObserved in 1 repos
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
T0840_network-connection-enumeration
Adversaries may perform network connection enumeration to discover information about device communication patterns.
1.21k repo starsObserved in 1 repos
DevOps & Security
T0843_program-download
Adversaries may perform a program download to transfer a user program to a controller.
1.21k repo starsObserved in 1 repos
DevOps & Security
T0845_program-upload
Adversaries may attempt to upload a program from a PLC to gather information about an industrial process.
1.21k repo starsObserved in 1 repos
DevOps & Security
T0846_remote-system-discovery
Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for subsequent Lateral Movement or Discovery techniques.
1.21k repo starsObserved in 1 repos
DevOps & Security
T0847_replication-through-removable-media
Adversaries may move onto systems, such as those separated from the enterprise network, by copying malware to removable media which is inserted into the control systems environment.
1.21k repo starsObserved in 1 repos
DevOps & Security
T0848_rogue-master
Adversaries may setup a rogue master to leverage control server functions to communicate with outstations.
1.21k repo starsObserved in 1 repos
DevOps & Security
T0851_rootkit
Adversaries may deploy rootkits to hide the presence of programs, files, network connections, services, drivers, and other system components.
1.21k repo starsObserved in 1 repos
DevOps & Security
T0852_screen-capture
Adversaries may attempt to perform screen capture of devices in the control system environment.
1.21k repo starsObserved in 1 repos
DevOps & Security
T0855_unauthorized-command-message
Adversaries may send unauthorized command messages to instruct control system assets to perform actions outside of their intended functionality, or without the logical preconditions to trigger thei...
1.21k repo starsObserved in 1 repos
DevOps & Security